Changelog, January 2024: SAML Jackson (now Ory Polis), Retraced, and More
Changelog: Key releases, changes, and updates to SAML Jackson (now Ory Polis), Retraced, and more in 2024
We're excited to share some of the highlights from the last two weeks, including notable updates to Ory Polis (SSO and Directory Sync), Retraced (Audit Logs), and our Open Source SaaS starter kit.
SAML Jackson
With SAML Jackson, our Single Sign-On (SSO) and Directory Sync solution, we're committed to delivering robust, user-friendly, and scalable solutions. In the last two weeks, we've made significant strides in this direction. Here are some of the highlights of what landed between v1.16.1 and v1.18.2:
- Added privacy-respecting analytics for the number of connections.
- Improvements to our custom branding support (add-on feature).
- SAML Federation now supports bridging to OIDC.
- Added error tracing for OIDC connections and related improvements.
- Added a new statistics API endpoint for SSO and Directory Sync connection count.
- Native integration with Ory.
- Added support to associate multiple tenants with SAML Federation apps. This is especially useful for large enterprises.
- General improvements to SAML Federation support.
There were also several dependency updates to ensure the security and performance of SAML Jackson.
You can find the complete changelog here on GitHub.
Retraced and the SaaS Starter Kit
Retraced, our Audit Logs solution, is a collaboration between Ory and Replicated. While this project didn't have the same level of activity as SAML Jackson, it's a critical component of our offering. One exciting new feature that's coming soon to Retraced is SIEM (Security Information and Event Management) integration for those on the premium tier. This will allow you to send your audit logs to your SIEM of choice, such as Splunk.
You can always find the full changelog for Retraced here on GitHub.
NOTE: Audit logs are currently a self-hosted only feature.
There have also been some improvements made to the Open Source SaaS starter kit such as allowing a team to create an invite link, making it easy for new members to join the team. We also landed several improvements to validation and error handling, and several dependency updates. If you're looking for a way to learn more about Ory and our various open source solutions, contributing to the SaaS starter kit is a great way to get started. Consider this our invitation to you.
Further reading

Ory + MCP: How to secure your MCP Servers with OAuth2.1

Learn how to implement secure MCP servers with Ory and OAuth 2.1 in this step-by-step guide. Protect your AI agents against unauthorized access while enabling standardized interactions.

Bad Robot: What makes Agentic AI good vs. bad?

Understand the risks of insecure MCP implementations and how OAuth keeps your AI agents compliant, trustworthy, and safe.